CVE-2025-22000

Summary

CVE-2025-22000 is a vulnerability affecting the Linux kernel. It involves a memory leak in the 'mm/huge_memory' subsystem. When an after-split folio, which is larger than expected and needs to be dropped due to End-Of-File (EOF), is not properly handled, it results in the retention of page cache refs. This issue leads to the folio not being freed, causing a memory leak. This vulnerability is of concern for filesystems with a blocksize larger than the page size, where truncation results in folios of higher order ones being created and not being freed properly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.